Personal Data Protection

Privacy Policy hm888 — Your Personal Data Protection

Your privacy is a priority at hm888. This document transparently explains how we collect, store, use and protect your personal information — in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010).

Last updated: January 2026
Bahasa Melayu (Malaysia)
256-bit SSL
PDPA 2010 Compliant
Our Privacy Commitment
256-bit
SSL encryption for all data
0
Sale of data to third parties
24/7
Continuous security monitoring
72h
Data request response time limit
ℹ️

Note: This Privacy Policy applies to all users accessing the hm888.plus website and the official hm888 mobile app. By using our platform, you agree to the handling of personal data as described in this document.

1Introduction

Hm888 ("we", "Platform", "hm888.plus") takes the privacy and data security of all registered members very seriously. This Privacy Policy is drawn up in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010) and reflects our commitment to handling your information in a responsible, transparent and secure manner.

We believe trust is the foundation of our relationship with every member. That is why we never sell, rent, or transfer your personal data to any third party for advertising or marketing purposes without your explicit consent. All information collected is used solely for legitimate platform operations and to enhance your experience at hm888.

This policy applies to all data collected through the hm888.plus website, iOS and Android mobile apps, and all our official communication channels including email, live chat, and Telegram. Please read it carefully to fully understand your rights and protections as an hm888 user.

2Data We Collect

Hm888 only collects personal data that is genuinely necessary to provide a secure, legally compliant and high-quality service. We do not collect excessive or irrelevant data. The following are the categories of data we collect:

2.1 Data You Provide Directly

  • Identity information: Full name, national ID or passport number, date of birth, and gender — required for KYC and age verification.
  • Contact information: Email address, mobile number, and mailing address — for account communications and transaction verification.
  • Financial information: Bank account number, bank name, e-wallet account number — for processing deposits and withdrawals.
  • Supporting documents: Copies of identification documents and bank statements for the KYC process as required by law.

2.2 Data Collected Automatically

  • Technical data: IP address, browser type and version, operating system, screen resolution, and unique device identifier.
  • Activity data: Pages visited, session duration, games played, wagering amounts, and transaction history — for internal analytics and fraud detection.
  • Cookie data: Session cookies, language preference cookies, and analytics cookies to enhance the user experience on the platform.
  • Approximate location data: Based on IP address to ensure regional legal compliance and detect suspicious access.
Data Category Example Primary Purpose Mandatory?
Identity Name, IC, DOB KYC & age verification Yes
Contact Email, phone Account communications Yes
Financial Bank account no. Deposits & withdrawals Yes
Technical IP, device, browser Security & anti-fraud Automatic
Activity Game history Platform analytics & improvement Automatic

3Data Usage Purposes

The personal data we collect is used exclusively for legitimate purposes directly related to the provision of hm888 services. We do not use your data for any purpose outside the scope stated below:

  • Account management: Creates, verifies, and manages member accounts including the KYC process required under Malaysian law.
  • Transaction processing: Processes deposits, withdrawals, and all financial activities securely and accurately.
  • Fraud prevention: Detects and prevents unauthorized access, duplicate accounts, money laundering, and other fraudulent activities.
  • Service communications: Sends transaction notifications, account updates, security alerts, and relevant promotional information.
  • Platform improvements: Analyzes usage patterns to improve overall design, performance, and user experience.
  • Legal compliance: Meets the reporting and audit requirements mandated by law and relevant authorities in Malaysia.

Our Guarantee: hm888 has never used your data to sell to third-party advertisers, build marketing profiles for other companies, or share your personal information without a legitimate basis and your consent. Your data belongs to you.

4Data Sharing

Hm888 does not sell, rent or disclose your personal data to third parties for commercial purposes. However, there are limited situations where data sharing is necessary and legally permissible:

4.1 Trusted Service Providers

We work with selected third-party service providers to support platform operations, including payment gateway providers, secure cloud services, and identity verification systems. All these providers are bound by strict confidentiality agreements and may only use your data for purposes directed by hm888.

4.2 Legal Requirements

Hm888 will disclose personal data when required by Malaysian law, a court order or a legitimate request from law enforcement agencies. In such situations, we will endeavour to notify you to the extent permitted by law before any disclosure is made.

4.3 Platform Interest Protection

In cases involving fraud investigation, money laundering, or serious security threats, relevant data may be shared with law enforcement bodies or appointed security experts to protect the interests of the platform and all members.

5Encryption & Security

Your data security is an investment we take extremely seriously. hm888 implements multiple layers of security to ensure your personal and financial information is protected at every level — from your device all the way to our servers.

  • 256-bit SSL encryption: All communications between your browser or app and hm888 servers are encrypted using the latest TLS 1.3 protocol, making your data unreadable to unauthorised parties during transmission.
  • Layered data storage: Personal and financial data is stored in isolated databases with role-based access control (RBAC), ensuring only authorized personnel can access sensitive data.
  • Continuous 24/7 monitoring: An automated threat detection system monitors unusual activity across all accounts and platform infrastructure at all times, including overnight and on public holidays.
  • Independent security audit: Security assessments by independent third parties are conducted regularly to identify and address any vulnerabilities before they can be exploited.
  • Two-factor authentication (2FA): Members are encouraged to enable 2FA for an additional layer of account protection, available via SMS or an authenticator app.

6Cookies & Tracking

Hm888 uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device when you visit our website.

6.1 Types of Cookies Used

  • Session Cookies: Required to maintain your login session and enable smooth navigation. These cookies are automatically deleted when you close your browser.
  • Functional Cookies: Saves your preferences such as language and display settings to ensure a more comfortable experience on your next visit.
  • Analytics Cookies: Used to understand aggregated, anonymized website usage patterns for platform improvement purposes.
  • Security Cookies: Helps detect suspicious login attempts and protect your account from unauthorized access.

6.2 Cookie Controls

You can manage your cookie settings through your browser preferences at any time. However, disabling certain cookies — particularly session cookies — may affect the functionality of the hm888 platform and your gaming experience. We recommend keeping at least session and security cookies enabled for optimal platform performance.

7Your Rights as a User

Under PDPA 2010 and hm888's internal policies, you have the following rights regarding your personal data. We are committed to facilitating the exercise of these rights within a reasonable timeframe:

👁️
Right of Access

You have the right to request a copy of all personal data we hold about you. Requests will be processed within 72 hours.

✏️
Right to Rectification

If any of your data is inaccurate or outdated, you may request a correction and we will update it immediately.

🗑️
Right to Erasure

You may request the deletion of your personal data, subject to mandatory legal retention requirements.

🚫
Right to Object

You may object to the processing of your data for direct marketing or optional analytics purposes at any time.

📦
Right to Data Portability

You have the right to receive your data in a machine-readable format for transfer to another platform if needed.

⏸️
Right to Restriction of Processing

In certain circumstances, you may request that the processing of your data be temporarily restricted while an investigation is ongoing.

⚠️

Important Note: Certain personal data — particularly KYC-related information and financial transaction records — may need to be retained for a minimum period as required by Malaysian law, even after account closure. The right to deletion is subject to these mandatory compliance requirements.

8Data Storage & Deletion

Hm888 retains your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by law. Retention periods vary by data type:

  • Active account data: Retained for as long as your account is active and up to 7 years after account closure for financial regulatory compliance.
  • Transaction records: Retained for a minimum of 7 years in accordance with Malaysia's anti-money laundering legal requirements.
  • KYC documents: Retained for 7 years after the end of the business relationship with you.
  • Activity & security logs: Retained for 2 years for security incident investigation purposes if required.
  • Analytics data: Converted to anonymized aggregate data after 12 months and cannot be personally linked to you.

Once the retention period expires, your data will be securely deleted using methods that ensure it cannot be recovered by any party.

9Privacy Policy Changes

Hm888 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our operations, legal requirements or industry best practices. Any material changes will be enforced as follows:

  • In-app notifications and emails are sent to all registered members at least 14 days before changes take effect.
  • The "Updated" date at the top of this document will be revised to reflect the latest version.
  • For minor changes that do not affect users' fundamental rights, notification may be provided solely via a notice on the website.

Continued use of the hm888 platform after any changes to the Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, please discontinue use of the platform and contact us to close your account.

10Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or your personal data, our team is ready to assist through the following channels:

  • Live Chat: Available 24/7 on the hm888 website and app — the fastest way to get an immediate response.
  • Email: [email protected] — for formal data requests or privacy complaints, responded to within 72 business hours.
  • Telegram: The official hm888 support channel for general enquiries and the latest platform updates.

For user rights requests such as data access, correction or deletion, please contact us by email with your account number and a copy of a valid identification document for identity verification. We will process your request within 72 business hours.

Why Your Privacy Is Safe at hm888

Six things that set hm888's data protection approach apart from other platforms

🔒
Banking-Grade Encryption

The same 256-bit SSL encryption technology used by leading banking institutions worldwide protects every bit of data transmitted between your device and hm888 servers.

🚫
No Data Sales

Hm888 has never sold, rented or transferred your personal data to advertisers or third-party data brokers, and never will. Your data remains exclusively under hm888's control.

📋
PDPA 2010 Compliance

All data handling practices at hm888 are designed and audited to ensure full compliance with Malaysia's Personal Data Protection Act 2010, the country's primary data protection legislation.

🛡️
24/7 Threat Monitoring

An automated threat detection system operates around the clock to identify and block unauthorised access attempts, cyberattacks and suspicious activity before they can affect your data.

⚙️
Full Control in Your Hands

Through your account settings, you can update personal information, manage communication preferences, request a copy of your data, or initiate account closure at any time.

🔍
Independent Security Audit

Comprehensive security assessments by internationally accredited independent audit firms are conducted regularly to ensure hm888's data protection systems consistently meet the highest industry standards.

READY TO PLAY SAFELY?

Register an hm888 Account — A Platform That Protects Your Privacy

Join hundreds of thousands of members who play with peace of mind at hm888 — knowing their personal data is protected to the highest security standards.

Bahasa Melayu